Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.eclipse.jetty.http2:jetty-http2-common

4 known vulnerabilities (4 high), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
4 · 4 high
Registry
Maven Central

Advisories 4

  • MadeYouReset HTTP/2 vulnerability

    Affected: from 12.0.0, fixed in 12.0.25; from 12.1.0.alpha0, fixed in 12.1.0.beta3.

  • Eclipse Jetty HTTP clients can increase memory allocation

    Affected: from 12.0.0, fixed in 12.0.17.

  • Jetty connection leaking on idle timeout when TCP congested

    Affected: from 12.0.0, fixed in 12.0.6.

  • CVE-2023-44487High 7.5 · KEV

    The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as

    Affected: from 12.0.0, fixed in 12.0.2.